You can do multiple S2S VPNs from Azure, the VPNs just have to be to different Meraki networks/sites. I'm not sure what you'd achieve with multiple S2S VPNs to the same site, unless you're looking at redundancy to different Azure regions? You can also achieve the HA configuration across regions with the vMX now, so that's an alternative. Have a look at these two documents.   https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site_to_Site_VPN_tunnels_to_Azure_VPN_Gateway   https://documentation.meraki.com/MX/Other_Topics/Deploying_Highly_Available_vMX100s_in_Azure   ... View more

The key material used for non-Meraki VPN is used until it is manually changed if you are seeing a need to change it this I presume would be dictated by the device/org you are peering with. ... View more

Hi @Prashant_India.   You would need to use the dual active head end design. https://www.willette.works/active-active-meraki-sd-wan-headends/  ... View more

1) Why would you - as a company, Cisco / Meraki in this regard - build in support for a competing product? Umbrella is going to be a "real" Securite Internet Gateway (SIG) very soon and definitely will add more security to the stack than zScaler - depending on which feature you're looking at. At least zScaler will never be able to have that vast pool of information regarding DNS security.   2) Of course you can further toot the "we need to decrypt everything that's encrypted"-horn. At some point in the future you'll (hopefully) find that it simply doesn't work and creates more burden and problems that you're trying to solve. But I guess this is getting more or less religious here. I can only second what @PhilipDAth wrote, and he did it way better than I could. ... View more